Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74D81C3C4B1911EF9CDFC577762E951A.roa
File: 74D81C3C4B1911EF9CDFC577762E951A.roa (raw, json)
Hash identifier: HBW5BEKthoAl4MjoTw97Se65x2eLrELVeLtxd54TFC4=
Subject key identifier: 61:BC:32:B0:F2:D0:EB:CE:0B:74:A8:AD:48:54:E1:69:C1:0D:5C:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A056
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74D81C3C4B1911EF9CDFC577762E951A.roa
Signing time: Fri 26 Jul 2024 06:36:58 +0000
ROA not before: Fri 26 Jul 2024 06:36:55 +0000
ROA not after: Thu 29 Aug 2024 06:36:55 +0000
asID: 149440
IP address blocks: 45.195.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41046 (0xa056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 06:36:55 2024 GMT
Not After : Aug 29 06:36:55 2024 GMT
Subject: CN=66a3440a-31e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:86:32:08:44:92:e2:bf:2d:68:46:56:6f:
96:47:6a:44:57:45:23:7d:d0:e8:45:02:da:9f:37:
44:55:02:73:e5:dd:50:92:87:af:78:fe:e2:49:fc:
92:1b:89:69:94:e7:b8:b4:56:c3:3e:f5:6d:62:d3:
6b:8c:91:f3:5b:ea:fb:e1:53:3f:1f:a7:9d:3e:51:
4b:d7:fb:4a:f4:df:2c:c5:84:5a:23:53:98:67:85:
e8:2c:75:6b:eb:9c:ea:d3:aa:f7:97:a9:15:a4:0c:
e3:0c:49:20:10:7d:0f:65:b9:67:01:d1:be:36:34:
2e:72:d5:d3:fd:53:96:41:92:ae:71:a6:5e:31:85:
1a:e6:8f:52:1e:c7:01:e4:b9:f5:b4:36:68:f6:18:
b7:b5:22:11:5f:90:00:4b:60:9a:07:c7:0e:99:1a:
6d:b4:87:e4:3d:e5:7a:af:da:f1:13:2e:1b:ab:c0:
91:ff:e4:12:9d:b5:99:c6:cd:77:35:44:de:8f:be:
4f:c1:4a:53:65:a9:64:2e:0e:af:6b:e0:cf:7a:4f:
50:89:6c:ac:3e:de:0e:be:03:e3:ba:8b:f5:d4:f7:
82:33:20:f2:96:18:a0:da:04:26:0c:5e:be:e9:2c:
50:58:e7:7c:88:45:9d:7b:46:0d:6a:64:b2:60:04:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BC:32:B0:F2:D0:EB:CE:0B:74:A8:AD:48:54:E1:69:C1:0D:5C:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74D81C3C4B1911EF9CDFC577762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.69.0/24
Signature Algorithm: sha256WithRSAEncryption
17:39:9f:f1:ba:c9:e7:9e:97:1f:52:ba:b9:c1:4c:91:3b:3a:
c0:c7:44:e2:d3:68:b6:54:67:44:90:85:fd:50:0d:f4:1b:b9:
bb:cb:3e:a2:09:c3:c9:c2:89:e1:d4:7b:85:f1:1f:68:a8:c5:
9f:ed:be:31:b6:1c:cc:23:33:7f:03:ec:43:14:70:e7:96:47:
50:40:c5:74:6c:c3:4b:ed:d7:2a:eb:d1:6e:0e:6f:9f:bf:82:
e3:45:95:a6:b5:70:b1:a7:5f:00:20:ab:13:f5:5a:4d:72:81:
39:a1:f7:bb:ca:16:92:3b:6c:a0:18:49:66:f5:ae:3b:99:bb:
ea:44:14:3e:cb:85:bc:87:8e:96:dc:4d:ed:e9:d3:d0:51:71:
e0:39:89:93:9c:02:eb:ad:17:09:14:cc:fc:74:48:ad:72:41:
09:a9:00:ec:89:55:eb:b0:61:c4:91:3a:f6:82:7f:97:af:48:
39:89:50:58:0b:e7:20:a8:61:85:f6:f5:8d:94:b5:3b:32:af:
eb:00:08:74:75:ca:21:a5:77:c6:f2:71:34:27:0c:9b:50:92:
71:91:73:fd:b6:5a:d6:5a:52:68:69:dc:d0:7e:69:86:40:f6:
30:aa:30:2b:4c:4d:ca:bf:08:56:7b:4c:5c:d0:5c:d8:75:ef:
2a:ee:e8:ec
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKBWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI2MDYzNjU1WhcNMjQwODI5MDYzNjU1WjAYMRYw
FAYDVQQDEw02NmEzNDQwYS0zMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzQWGMghEkuK/LWhGVm+WR2pEV0UjfdDoRQLanzdEVQJz5d1QkoeveP7i
SfySG4lplOe4tFbDPvVtYtNrjJHzW+r74VM/H6edPlFL1/tK9N8sxYRaI1OYZ4Xo
LHVr65zq06r3l6kVpAzjDEkgEH0PZblnAdG+NjQuctXT/VOWQZKucaZeMYUa5o9S
HscB5Ln1tDZo9hi3tSIRX5AAS2CaB8cOmRpttIfkPeV6r9rxEy4bq8CR/+QSnbWZ
xs13NUTej75PwUpTZalkLg6va+DPek9QiWysPt4OvgPjuov11PeCMyDylhig2gQm
DF6+6SxQWOd8iEWde0YNamSyYARccwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGG8
MrDy0OvOC3SorUhU4WnBDVxaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NEQ4MUMzQzRCMTkxMUVGOUNERkM1Nzc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcNFMA0GCSqGSIb3DQEBCwUA
A4IBAQAXOZ/xusnnnpcfUrq5wUyROzrAx0Ti02i2VGdEkIX9UA30G7m7yz6iCcPJ
wonh1HuF8R9oqMWf7b4xthzMIzN/A+xDFHDnlkdQQMV0bMNL7dcq69FuDm+fv4Lj
RZWmtXCxp18AIKsT9VpNcoE5ofe7yhaSO2ygGElm9a47mbvqRBQ+y4W8h46W3E3t
6dPQUXHgOYmTnALrrRcJFMz8dEitckEJqQDsiVXrsGHEkTr2gn+Xr0g5iVBYC+cg
qGGF9vWNlLU7Mq/rAAh0dcohpXfG8nE0JwybUJJxkXP9tlrWWlJoadzQfmmGQPYw
qjArTE3KvwhWe0xc0FzYde8q7ujs
-----END CERTIFICATE-----
Generated at Thu Aug 29 14:50:20 2024 by rpki-client on console-fra.rpki-client.org